CVE-2014-9916: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 tribename or 2 tags parameter in a tribes page request to user/ or the 3 userid or 4 fullname parameter to signup.php...

Digital Campus2.0数字校园平台 classpubliccourse.aspx FullName参数SQL注入漏洞

文件：/code/teach/coursecenter/classpubliccourse.aspx 代码： code 区域 private void CheckCourse PublicCourseManager publicCourseManager = new PublicCourseManager; string request = base.GetRequest"paramID"; string request2 = base.GetRequest"FullName"; //过滤不严，下面定义的是Int,字符型注入。 int num =...

CVE-2014-6607: Undefined Security Weakness

M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409...

PT-2014-7298

Name of the Vulnerable Software and Affected Versions M/Monit versions 3.3.2 and earlier Description The issue allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters. Recommendations For M/Monit versions 3.3.2 and earlier, at the...

PT-2014-7212

Name of the Vulnerable Software and Affected Versions M/Monit versions 3.3.2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change user passwords. This is achieved via the fullname and password parameters...

Bilboplanet 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Bilboplanet 2.0 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: Multiple XSS vulnerabilities in Bilboplanet application Date: 10/15/13 Exploit Author:Vivek N http://nvivek.weebly.com/ Vendor Homepage: http://www.bilboplanet.com/ Software Link:...

Envoy: Delete visitor from IPAD with fullname which contains JS results XSS

Hi, Update visitor from IPAD with fullname of alert1 and save. IGNORE THE POP UP, IT HAS BEEN REPORTED ALREADY Delete this user, XSS will pop up, the fullname is now stored XSS. Any visitor which using the IPAD application can create stored XSS which will be activate once you clicked on the delet...

PT-2014-3218

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS 220 version sg2000-2000.1331 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the fullna...

CVE-2013-6923: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or HTML via the 1 fullname parameter to admin/accesscontroluseredit.php or 2 workname parameter to...

DEBIAN-CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

CVE-2013-4885: Undefined Security Weakness

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

PT-2013-5261

Name of the Vulnerable Software and Affected Versions NMap versions prior to 6.40 ALT Linux affected versions not specified Description The issue allows remote servers to upload files with arbitrary names via a crafted FullName parameter in a response. This can be achieved by using directory...

CVE-2013-4759

Multiple cross-site scripting XSS vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 fullname, or 3 email parameter to...

PT-2013-5178

Name of the Vulnerable Software and Affected Versions Magnolia Form module versions 1.x before 1.4.7 Magnolia Form module versions 2.x before 2.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the username, fullname, or email parameter to...

CVE-2013-4759: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 fullname, or 3 email parameter to...

CVE-2008-6831: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the 1 fullname Full Name parameter in the ViewProfile page or 2 returnUrl parameter in a form, as demonstrated using...

XSS vulnerability in signup actions

Vulnerable URL's: - signup.action - dosignup.action on username, email, password, confirm, fullname...

XSS vulnerability in signup actions

Vulnerable URL's: - signup.action - dosignup.action on username, email, password, confirm, fullname...

XSS vulnerability in signup actions

Vulnerable URL's: - signup.action - dosignup.action on username, email, password, confirm, fullname...